CVE-2021-3927

vim is vulnerable to Heap-based Buffer Overflow

CVSS 3.1

7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-25)

CWEs

CWE-122, CWE-787

Published

2021-11-05

Modified

2026-10-08

Record from

the NVD, synced 2026-10-19

Affected

• debian:debian_linux
• fedoraproject:fedora
• vim:vim

References

• http://www.openwall.com/lists/oss-security/2022/01/15/1
• https://github.com/vim/vim/commit/0b5b06cb4777d1401fdf83e7d48d287662236e7e
• https://huntr.dev/bounties/9c2b2c82-48bb-4be9-ab8f-a48ea252d1b0
• https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html
• https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html

Check your stackJSON